Live Blog: Cyber Reflections on the Iran-Israel-U.S. War Read the Analysis
SOCRadar Blog

Cyber News

Latest SOCRadar research and analysis on Cyber News: threat reports, advisories and practical guidance for security teams.

Latest articles

Critical JetBrains TeamCity Authentication Bypass (CVE-2024-23917); CISA Adds Chrome Type Confusion to KEV (CVE-2023-4762) SOCRadar

Critical JetBrains TeamCity Authentication Bypass (CVE-2024-23917); CISA Adds Chrome Type Confusion to KEV (CVE-2023-4762)

JetBrains recently discovered a critical authentication bypass vulnerability in TeamCity On-Premises servers. This vulnerability could allow attackers to take over vulnerable instances with elevated privileges. TeamCity is a powerful CI/CD…

Latest Vulnerabilities in FortiSIEM, Oracle WebLogic, Apache Tomcat: CVE-2024-23108, CVE-2024-23109, CVE-2024-20931, CVE-2024-21733 SOCRadar

Latest Vulnerabilities in FortiSIEM, Oracle WebLogic, Apache Tomcat: CVE-2024-23108, CVE-2024-23109, CVE-2024-20931, CVE-2024-21733

[Update] May 29, 2024: “PoC Exploit for Critical FortiSIEM Vulnerability (CVE-2024-23108)”  The ever-evolving landscape of cybersecurity presents new challenges every day, with vulnerabilities emerging that demand our immediate attention. In…

Barracuda Disclosed Critical Vulnerabilities in WAF, Affecting File Upload and JSON Protection SOCRadar

Barracuda Disclosed Critical Vulnerabilities in WAF, Affecting File Upload and JSON Protection

Barracuda recently issued a security advisory confirming the presence of 7 security vulnerabilities, ranging from high to critical severity, within their  WAF  (Web Application Firewall)  product. Barracuda WAF is a…

AnyDesk Production Server Breach and Dark Web Sale of 18,000 Accounts SOCRadar

AnyDesk Production Server Breach and Dark Web Sale of 18,000 Accounts

AnyDesk, a prominent remote desktop software provider, reported a security breach affecting its production systems on February 2, 2024. Speculation about the incident had already begun circulating on social media before the…

Latest Critical Vulnerabilities in Juniper Secure Analytics and Mastodon: CVE-2023-37920, CVE-2021-4048, CVE-2024-23832 SOCRadar

Latest Critical Vulnerabilities in Juniper Secure Analytics and Mastodon: CVE-2023-37920, CVE-2021-4048, CVE-2024-23832

The latest serious issues demanding attention include severe vulnerabilities found in Juniper Networks’ Secure Analytics and the decentralized social network “Mastodon”. Of critical concern is the vulnerability in Mastodon, along…

Severe Vulnerabilities in Moby BuildKit and OCI runc: CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-21626 SOCRadar

Severe Vulnerabilities in Moby BuildKit and OCI runc: CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-21626

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding Moby and the Open Container Initiative (OCI) security updates that fix multiple vulnerabilities. The vulnerabilities affect Docker-related components, including…

Vulnerability in Ivanti Connect Secure, Policy Secure, and Neurons for ZTA Exploited (CVE-2024-21888, CVE-2024-21893) SOCRadar

Vulnerability in Ivanti Connect Secure, Policy Secure, and Neurons for ZTA Exploited (CVE-2024-21888, CVE-2024-21893)

[Update] March 11, 2024: “Rapid Exploitation of CVE-2024-21888 and CVE-2024-21893 by Magnet Goblin”, “Indicators of Compromise (IOCs)” [Update] March 1, 2024: “CISA and Partners Issued Joint Advisory on Exploitation of…

GNU C Library Affected by Several Vulnerabilities, Attackers Could Obtain Root Access (CVE-2023-6246) SOCRadar

GNU C Library Affected by Several Vulnerabilities, Attackers Could Obtain Root Access (CVE-2023-6246)

Researchers have recently discovered several vulnerabilities in GNU C Library (glibc), impacting various Linux distributions. One of them, CVE-2023-6246, poses a significant risk, potentially granting unauthorized root access. GNU C Library,…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action